Nisarg Ramdas Nalawade

Information Security Analyst

Kyndryl

Pune

01.2021 - Current

Perform security health checks (SHC) utilizing CIS benchmarks and Kyndryl traditional technical specifications across various technologies (Operating systems, Database, Storage, Mainframe, Network, Cloud Portal, Hypervisor).
Validate security health check scan outputs, identify control deviations, and raise non-compliance issues aligned with client security policies and standards.
Track, manage, and close non-compliance records, ensuring timely remediation, and accurate documentation.
Collaborate with cross-functional teams to remediate deviations, reduce security risks, and maintain compliance posture.
Support ISO 27001, SOC, PCI DSS, Risk-Based, and SPTP audits.
Developed CIS and Kyndryl traditional technical specification-compliant bash scripts for Red Hat Enterprise Linux (RHEL) with full automation and zero manual intervention.
Calibrate scripts and UDC playbooks based on client-specific security and compliance requirements.
Execute security health check scans using Ansible (UDC playbooks), Bash, and PowerShell scripts.
Create traditional technical specification documents for technologies lacking official CIS benchmarks.
RHCSA certified, with a foundational understanding of Linux system administration.
Track all non-compliance issues end-to-end, and collaborate with stakeholders to ensure required actions are completed within the defined timelines. Where timelines cannot be met, coordinate with owners to extend non-compliance records with appropriate justification in alignment with security policy.
Maintain patch compliance by collaborating with respective stakeholders to validate released patches, determine applicability, and ensure timely remediation or extension, with required supportive evidence.
Work with stakeholders to identify, document, and track risks.